Re: [Exist-open] Java Client issues with new Java version: unsigned application re questing unrestricting access to system

[Martin H. <mh...@uv...>]

I've had this happen twice recently. It was complaining about the log4j 
jar file being unsigned (and the file was definitely signed; it's been 
working for months).

The first time, I fixed it by clearing the cache in the Java webstart 
control panel. The second time, I touched the log4j jar file on the server.

Then today it happened again:

Unsigned application requesting unrestricted access to system. Unsigned 
resource:

[...]/webstart/wscommons-util-1.0./2.jar

NLPException[category: Security Error : Exception: null : LaunchDesc:
<jnlp spec="1.0+" 
codebase="http://pear.hcmc.uvic.ca:8081/mapoflondon/webstart/" 
href="exist.jnlp">
   <information>
     <title>eXist XML-DB client</title>
     <vendor>exist-db.org</vendor>
     <homepage href="http://exist-db.org"/>
     <description>Integrated command-line and gui client, entirely based 
on the XML:DB API and provides commands for most database related tasks, 
like creating and removing collections, user management, batch-loading 
XML data or querying.</description>
     <description kind="short">eXist XML-DB client</description>
     <description kind="tooltip">eXist XML-DB client</description>
     <icon href="jnlp_logo.jpg"/>
     <icon href="jnlp_icon_64x64.gif" width="64" height="64"/>
     <icon href="jnlp_icon_32x32.gif" width="32" height="32"/>
   </information>
   <security>
     <all-permissions/>
   </security>
   <resources>
     <property name="jnlp.packEnabled" value="true"/>
     <j2se version="1.6+"/>
     <jar href="log4j-1.2.16.jar" size="503026"/>
     <jar href="ws-commons-util-1.0.2.jar" size="37747"/>
     <jar href="commons-pool-1.5.6.jar" size="106433"/>
     <jar href="exist.jar" size="4293875"/>
     <jar href="xmlrpc-common-3.1.3.jar" size="119433"/>
     <jar href="slf4j-log4j12-1.6.2.jar" size="11694"/>
     <jar href="sunxacml-1.2.jar" size="205987"/>
     <jar href="excalibur-cli-1.0.jar" size="25685"/>
     <jar href="slf4j-api-1.6.2.jar" size="28919"/>
     <jar href="xmldb.jar" size="12203"/>
     <jar href="xmlrpc-client-3.1.3.jar" size="64034"/>
     <jar href="jline-0.9.94.jar" size="91945"/>
     <jar href="jEdit-syntax.jar" size="85715"/>
   </resources>
   <application-desc main-class="org.exist.client.InteractiveClient">
 
<argument>-ouri=xmldb:exist://pear.hcmc.uvic.ca:8081/mapoflondon/xmlrpc</argument>
     <argument>--no-embedded-mode</argument>
   </application-desc>
</jnlp> ]
	at 
com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResourcesHelper(Unknown 
Source)
	at 
com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResources(Unknown 
Source)
	at com.sun.javaws.Launcher.prepareResources(Unknown Source)
	at com.sun.javaws.Launcher.prepareAllResources(Unknown Source)
	at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
	at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
	at com.sun.javaws.Launcher.launch(Unknown Source)
	at com.sun.javaws.Main.launchApp(Unknown Source)
	at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
	at com.sun.javaws.Main$1.run(Unknown Source)
	at java.lang.Thread.run(Thread.java:722)


This is with eXist 1.5.0 dev from last fall some time. (The client 
doesn't give the build number.)

Webstart is using oracle java 7.

I think this is a recent problem with the Oracle JVM.

Cheers,
Martin


On 12-06-20 06:11 AM, Dannes Wessels wrote:
> Hi,
>
> Can you see which jar file is reported to be unsigned? How did you
> install the exist-db server? Or did it build your self? Which version
> exactly? 1.4.1? 1.4.2?
>
> Sometimes you can cleaning the webstart cache can solve 'some' issues.
> Do you ant to use a 1.4 client to connect to an 1.2 server? that might
> be problematic.
>
> cheers
>
> Dannes
>
> On Wed, Jun 20, 2012 at 2:42 PM, Derek Werthmuller
> <dwe...@ct... <mailto:dwe...@ct...>> wrote:
>
>     Just installed the newest version of Java for windows 6u33 and the
>     security
>     changes in this update keep the jnlp XML-DB client from running.
>
>
> --> sorry what do you mean? (esp. the second half of the sentence)
>
>     We get a "unsigned application requesting unrestricting access to
>     system"
>     message.  I can't seem to find any ability to add an exception in
>     the java
>     Control panel.
>
>     Java 7u5 isn't any better.
>
>
> right, it is not a java issue, but an issue where at least one jar file
> is not 'signed'. Did you build the code yourself?
>
>     We're using the jnlp client to make changes to content in the XML DB
>     (1.2?)
>     hosted under the Cocoon 2.x setup.
>     The jnlp client is from a 1.4 XML-DB version.
>
>
> see my other questions
> D.
>
> --
> eXist-db Native XML Database - http://exist-db.org
> Join us on linked-in: http://www.linkedin.com/groups?gid=35624
>
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>
>
>
> _______________________________________________
> Exist-open mailing list
> Exi...@li...
> https://lists.sourceforge.net/lists/listinfo/exist-open